💣Exploit CVE-2024-1718 - The Claudio Sanches – Checkout Cielo for WooCommer

[Maksim]

CVE ID : CVE-2024-1718
Published : June 4, 2024, 6:15 a.m. | 18 minutes ago
Description : The Claudio Sanches – Checkout Cielo for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient payment validation in the update_order_status() function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to update the status of orders to paid bypassing payment.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.